Summary
Ein Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Office Produkten, Microsoft Office Online Server, Microsoft 365 Apps, Microsoft SharePoint, Microsoft Teams und Microsoft Skype ausnutzen, um erhöhte Berechtigungen zu erlangen, um Code auszuführen, um Informationen offenzulegen und um den Nutzer zu täuschen.
Product
Die Microsoft Office Suite beinhaltet zahlreiche Büroanwendungen wie Textverarbeitung, Tabellenkalkulation, Datenbank und weitere Applikationen.
Microsoft Office Online Server ist ein Serverprodukt, das browserbasierte Versionen von Word, PowerPoint, Excel und OneNote bereitstellt.
Microsoft 365 Apps ist eine Office Suite für zahlreiche Büroanwendungen.
Microsoft Sharepoint Services ist ein Portalsystem für die zentrale Verwaltung von Dokumenten und Anwendungen. Die Inhalte werden u.a. über Webseiten zur Verfügung gestellt.
Microsoft Teams ist ein Kollaborations-, Kommunikations- und Videokonferenz-Tool.
Skype ist ein Instant-Messaging-Dienst. Unterstützt werden Videokonferenzen, IP-Telefonie, Instant-Messaging, Dateiübertragung und Screen-Sharing.
Vulnerabilities 135
-
Critical 9.8
Skype for Business Remote Code Execution Vulnerability
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft Office SharePoint Remote Code Execution Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Access Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office SharePoint Remote Code Execution Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Publisher Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Graphics Component Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Remote Code Execution Vulnerability
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Publisher Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Windows Graphics Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
-
High 8.4
Microsoft Outlook and Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
-
High 8.3
Skype for Business Spoofing Vulnerability
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.
-
High 7.8
Microsoft Word Remote Code Execution Vulnerability
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 7.5
Skype for Business Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.
-
High 7.5
Skype for Business and Lync Denial of Service Vulnerability
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
-
High 7.5
Microsoft Office SharePoint Remote Code Execution Vulnerability
Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 7.5
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
-
High 7.3
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
-
High 7.3
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
-
High 7.3
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.
-
High 7.1
Skype for Business Spoofing Vulnerability
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.
-
High 7.0
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
Medium 6.8
Microsoft Teams for Android Information Disclosure Vulnerability
Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Skype for Business Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
-
Medium 6.5
Microsoft Office Spoofing Vulnerability
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.
-
Medium 6.5
Skype for Business and Lync Denial of Service Vulnerability
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.
-
Medium 6.5
Skype for Business Information Disclosure Vulnerability
Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Skype for Business and Lync Denial of Service Vulnerability
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.
-
Medium 6.5
Microsoft Office SharePoint Information Disclosure Vulnerability
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Information Disclosure Vulnerability
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office SharePoint Information Disclosure Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Skype for Business Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
-
Medium 6.5
Microsoft Office SharePoint Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office PowerPoint Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office PowerPoint Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Information Disclosure Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
Medium 5.8
Microsoft Teams for Android Information Disclosure Vulnerability
Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
-
Medium 5.5
Microsoft Office Word Information Disclosure Vulnerability
Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Excel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Excel Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Excel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Excel Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Excel Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Office Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Office Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
-
Medium 5.5
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
-
Medium 5.0
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
-
Medium 4.6
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
-
Low 3.5
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
-
Low 3.5
Microsoft Office SharePoint Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Revision history
-
#1
Initiale Fassung
References
-
Microsoft Leitfaden für Sicherheitsupdates
https://msrc.microsoft.com/update-guide/
-
Microsoft Security Advisory CVE-2026-81951
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81951
-
Microsoft Security Advisory CVE-2026-81947
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81947
-
Microsoft Security Advisory CVE-2026-81948
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81948
-
Microsoft Security Advisory CVE-2026-81949
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81949
-
Microsoft Security Advisory CVE-2026-81950
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81950
-
Microsoft Security Advisory CVE-2026-81954
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81954
-
Microsoft Security Advisory CVE-2026-81956
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81956
-
Microsoft Security Advisory CVE-2026-81953
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81953
-
Microsoft Security Advisory CVE-2026-81960
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81960
-
Microsoft Security Advisory CVE-2026-81958
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81958
-
Microsoft Security Advisory CVE-2026-81392
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81392
-
Microsoft Security Advisory CVE-2026-81393
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81393
-
Microsoft Security Advisory CVE-2026-81394
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81394
-
Microsoft Security Advisory CVE-2026-81395
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81395
-
Microsoft Security Advisory CVE-2026-81396
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81396
-
Microsoft Security Advisory CVE-2026-81397
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81397
-
Microsoft Security Advisory CVE-2026-81398
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81398
-
Microsoft Security Advisory CVE-2026-81399
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81399
-
Microsoft Security Advisory CVE-2026-81400
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81400
-
Microsoft Security Advisory CVE-2026-81401
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81401
-
Microsoft Security Advisory CVE-2026-81957
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81957
-
Microsoft Security Advisory CVE-2026-81959
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81959
-
Microsoft Security Advisory CVE-2026-85875
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85875
-
Microsoft Security Advisory CVE-2026-81390
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81390
-
Microsoft Security Advisory CVE-2026-81389
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81389
-
Microsoft Security Advisory CVE-2026-81388
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81388
-
Microsoft Security Advisory CVE-2026-81387
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81387
-
Microsoft Security Advisory CVE-2026-81386
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81386
-
Microsoft Security Advisory CVE-2026-78518
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78518
-
Microsoft Security Advisory CVE-2026-81391
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81391
-
Microsoft Security Advisory CVE-2026-78513
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78513
-
Microsoft Security Advisory CVE-2026-72977
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72977
-
Microsoft Security Advisory CVE-2026-69797
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69797
-
Microsoft Security Advisory CVE-2026-69767
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69767
-
Microsoft Security Advisory CVE-2026-69678
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69678
-
Microsoft Security Advisory CVE-2026-72975
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72975
-
Microsoft Security Advisory CVE-2026-78522
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78522
-
Microsoft Security Advisory CVE-2026-80080
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80080
-
Microsoft Security Advisory CVE-2026-78520
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78520
-
Microsoft Security Advisory CVE-2026-78521
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78521
-
Microsoft Security Advisory CVE-2026-80079
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80079
-
Microsoft Security Advisory CVE-2026-78525
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78525
-
Microsoft Security Advisory CVE-2026-80085
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085
-
Microsoft Security Advisory CVE-2026-69671
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69671
-
Microsoft Security Advisory CVE-2026-78517
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78517
-
Microsoft Security Advisory CVE-2026-78514
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78514
-
Microsoft Security Advisory CVE-2026-78512
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512
-
Microsoft Security Advisory CVE-2026-78511
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78511
-
Microsoft Security Advisory CVE-2026-78509
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78509
-
Microsoft Security Advisory CVE-2026-80090
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80090
-
Microsoft Security Advisory CVE-2026-83951
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83951
-
Microsoft Security Advisory CVE-2026-69556
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69556
-
Microsoft Security Advisory CVE-2026-69719
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69719
-
Microsoft Security Advisory CVE-2026-69686
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69686
-
Microsoft Security Advisory CVE-2026-69722
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69722
-
Microsoft Security Advisory CVE-2026-69734
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69734
-
Microsoft Security Advisory CVE-2026-69759
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69759
-
Microsoft Security Advisory CVE-2026-69764
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69764
-
Microsoft Security Advisory CVE-2026-72972
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72972
-
Microsoft Security Advisory CVE-2026-83949
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83949
-
Microsoft Security Advisory CVE-2026-72973
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72973
-
Microsoft Security Advisory CVE-2026-77901
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901
-
Microsoft Security Advisory CVE-2026-77911
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77911
-
Microsoft Security Advisory CVE-2026-78502
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78502
-
Microsoft Security Advisory CVE-2026-78503
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503
-
Microsoft Security Advisory CVE-2026-78504
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504
-
Microsoft Security Advisory CVE-2026-78506
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506
-
Microsoft Security Advisory CVE-2026-72976
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72976
-
Microsoft Security Advisory CVE-2026-69742
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69742
-
Microsoft Security Advisory CVE-2026-81385
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81385
-
Microsoft Security Advisory CVE-2026-69778
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69778
-
Microsoft Security Advisory CVE-2026-69529
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69529
-
Microsoft Security Advisory CVE-2026-69614
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69614
-
Microsoft Security Advisory CVE-2026-69477
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69477
-
Microsoft Security Advisory CVE-2026-69442
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69442
-
Microsoft Security Advisory CVE-2026-69285
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69285
-
Microsoft Security Advisory CVE-2026-64918
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64918
-
Microsoft Security Advisory CVE-2026-62804
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62804
-
Microsoft Security Advisory CVE-2026-81955
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81955